FIELD NOTES
A personal record of travel, networks and small failures
TRAVEL NOTE

VPN vs Outline in Russia: Owning the Server Did Not Mean Owning the Connection

The driver was heading toward the wrong warehouse, and I had eighteen minutes to change the delivery address before he reached the gate. The foreign logistics portal would not open, the updated label remained stuck in my outbox, and my supplier’s messages arrived without their attachments. I blamed the mobile signal, moved closer to the warehouse entrance, and connected to the commercial VPN I had used for years. Its status turned green. The portal continued spinning.

I ran a small homeware business in Moscow. The shipment contained materials needed for the following week’s orders, and the driver had been given an outdated address. I needed to open the logistics dashboard, replace the label, and send the correct gate number before the mistake became a wasted afternoon.

Russia’s tightening internet restrictions had made this kind of interruption increasingly common. By early 2026, more than 400 VPN services had reportedly been blocked, while messaging restrictions and mobile-internet disruptions were complicating ordinary work for small businesses.

That was why I had prepared two options: a large commercial VPN and an Outline server I controlled myself.

The first offered scale. The second offered independence.

At the warehouse entrance, neither advantage produced a working page.

The short answer

I had treated Outline as the opposite of a commercial VPN: private instead of shared, self-hosted instead of managed, one controlled server instead of a public fleet. But ownership was not the standard that mattered with the driver approaching the wrong gate.

The large VPN gave me more servers, not a working route

The established provider had earned my trust over several years. It had a large support operation, applications for every device, and enough server locations to cover almost any trip.

I selected Finland because it was nearby.

The VPN connected, but the logistics portal timed out. I tried Sweden. The login page appeared, then the session reset. A server in the Netherlands opened the supplier chat, but the shipping label would not download.

Each change felt reasonable on its own. Together, they consumed six minutes without moving the shipment.

The provider’s scale remained useful on ordinary networks. Here, its familiar servers and traffic patterns gave the local network clear targets. The country list offered more routes to test, but no reason to expect the next flag to behave differently from the last.

I stopped switching and opened Outline.

That was supposed to remove the weaknesses of a public VPN. Instead of sharing a commercial server with thousands of strangers, I would use a private server whose address and access keys I controlled.

It sounded like the more durable answer.

Outline worked until the network underneath it changed

I had created the Outline server three months earlier on a small cloud machine in Helsinki. Outline Manager handled the installation, generated access keys, and let me add the connection to my laptop and phone.

At the office, it had worked cleanly. There was no country map and no crowded public exit server. I had one route, used by only a few people I trusted.

That history made the warehouse result confusing.

The client connected. My supplier’s text messages appeared. The attachments did not. The logistics portal loaded its header and stopped before the login form.

I disconnected and tried again.

The same partial page returned.

A café across the road had public Wi-Fi, so I carried the laptop there and reconnected. This time the portal opened. I reached the shipment page and began replacing the delivery label.

Then the café connection dropped.

My laptop moved back to mobile data, and the page froze before saving the address.

The server had not gone offline. Outline worked over one local network and failed over another.

Other users in Russia have described the same uneven pattern: a private Outline server works over Wi-Fi or with one provider, then becomes unreliable on mobile data or elsewhere. That brief observation matched what I was seeing. “Working” and “blocked” were not opposites anymore. The same server could be both within a few metres.

More importantly, the switch between them had interrupted the task at the exact moment I needed continuity.


Self-hosting made me the support team

Outline’s strongest appeal is control. I chose the cloud provider, created the server, generated the keys, and decided who could connect.

But control also meant that the next repair belonged to me.

My connection depended on one cloud address, one server configuration, and the way the current mobile network treated that traffic. When the route became unreliable, there was no managed service adapting it behind the scenes.

Outline supports techniques for making traffic harder to classify, including prefixes and carrying Shadowsocks through WebSockets. In practical terms, that meant rebuilding part of the route so it resembled ordinary web traffic.

Those options were valuable when I had time to maintain the server. At the café table, they were another technical project.

I would have to check client compatibility, change the configuration, create a new key, test it, and make sure I had not broken access for the two colleagues already using the server.

The driver would not wait while I administered infrastructure.

I tried the quickest adjustment available. I generated another key and moved the server to a different port. The phone connected, but the logistics page still stalled.

The courier app showed seven minutes remaining.

That was when the comparison changed for me.

I had treated Outline as the opposite of a commercial VPN: private instead of shared, self-hosted instead of managed, one controlled server instead of a public fleet. But ownership was not the standard that mattered with the driver approaching the wrong gate.

The connection needed to adapt before I had time to repair it.

The next attempt completed the shipment first

I opened OnlydogVPN and selected the preset for a restrictive, unstable network.

There was no server to maintain, access key to rebuild, or country list asking me to guess where the next usable route might be. I connected and returned to the logistics portal.

The login form appeared.

I opened the shipment, replaced the warehouse address, and uploaded the corrected label. The progress bar passed the point where it had frozen over Outline.

The new label saved.

I copied the correct gate number into the supplier chat and sent the PDF to the driver. The attachment uploaded, followed by two check marks.

He replied with a photograph of the road sign and changed direction.

Only after the task was complete did the design difference matter.

The smaller app uses HTTP/3-based transport with additional obfuscation. Its preset handled the restrictive-network problem without turning it into a server-maintenance job. Instead of asking me to redesign the route, it gave the applications a usable one.

I could not observe whether the mobile provider was reacting to Outline’s server address, port, traffic pattern, or several signals together. What I could observe was the result: the commercial VPN offered several countries but no completed page, Outline worked on café Wi-Fi and failed again on mobile data, while the smaller app saved the address and delivered the label.

That result changed how I understood self-hosting.

Owning the server gave me control over the infrastructure and its users. It did not make every network between Moscow and Helsinki cooperate with it.

The useful route followed me out of the café

I closed the laptop and walked back toward the warehouse while calling the supplier.

As I left the café, the phone moved from Wi-Fi to mobile data. The audio disappeared for a moment, then returned. I did not reconnect, select another route, or restart the call.

The supplier stayed on the line while we confirmed the new delivery window.

That smaller success was the reason I kept the app installed after the shipment arrived. My work did not happen on one stable connection. It moved between office Wi-Fi, mobile data, public networks, and warehouse signals weakened by concrete walls.

Outline had given me a route I could own. The smaller service gave me one that recovered while I moved.

There was also less to remember. Outline required me to keep the server, access keys, configuration, and client setup aligned. The managed app reduced that entire chain to the situation I was trying to solve.

The service has fewer locations, fewer independent reviews, and a shorter public history than the established provider or the Outline project. It also requires trusting a managed service rather than infrastructure I personally operate.

At the warehouse, that trade was straightforward.

The commercial VPN gave me a mature network and many routes to test. Outline gave me ownership of one route and the tools to repair it. The smaller app gave me a route that adapted before the repair became necessary.

The driver did not need me to own the tunnel. He needed the new gate number before he reached the old one.

Questions this experience may leave you with

What was actually causing the problem?

I had treated Outline as the opposite of a commercial VPN: private instead of shared, self-hosted instead of managed, one controlled server instead of a public fleet. But ownership was not the standard that mattered with the driver approaching the wrong gate.

Why did the obvious fixes fail?

The VPN connected, but the logistics portal timed out. I tried Sweden. The login page appeared, then the session reset. A server in the Netherlands opened the supplier chat, but the shipping label would not download.

What should you check first?

I would have to check client compatibility, change the configuration, create a new key, test it, and make sure I had not broken access for the two colleagues already using the server.

What finally changed the result?

I could not observe whether the mobile provider was reacting to Outline’s server address, port, traffic pattern, or several signals together. What I could observe was the result: the commercial VPN offered several countries but no completed page, Outline worked on café Wi-Fi and failed again on mobile data, while the smaller app saved the address and delivered the label.

What is worth remembering?

Owning the server gave me control over the infrastructure and its users. It did not make every network between Moscow and Helsinki cooperate with it.